702948 matches found
CVE-2026-110360 WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ajax Search Lite: from n/a through 4.14.5...
EUVD-2026-102243
Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ajax Search Lite: from n/a through 4.14.5...
CVE-2026-110360
The WPdreams Ajax Search Lite plugin (versions
CVE-2026-21533_Scanner.py
CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation Detection Tool This repository contains a detection tool for the CVE-2026-21533 vulnerability, a privilege management flaw in Windows Remote Desktop Services RDS that could allow a local attacker to elevate their privileges to SYSTEM...
CVE-2026-31431
CVE-2026-31431 POC for CVE-2026-31431 Script The script is a small 10-lines POC that allows any user to become root on a machine...
WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Alex J. in WordPress Plugin Ajax Search Lite versions = 4.14.5...
CVE-2026-109897 WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...
CVE-2026-109897
The Strong Testimonials WordPress plugin (versions
CVE-2026-109897 WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...
EUVD-2026-102242
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...
WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by GOOKBOB in WordPress Plugin Strong Testimonials versions = 3.3.12...
CVE-2025-46818
CVE-2025-46818 – Redis Lua Sandbox Cross-User Escape Sandbox escape via deprecated Lua APIs and mutable metatables on Redis 8.2.1. Overview Redis 8.2.1 keeps deprecated Lua builtins getfenv, setfenv, newproxy exposed to scripts and fails to lock metatables for basic types. An attacker can inject...
CVE-2021-4034-Linux
CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...
CVE-2026-6355
Augmentt: Cross-Tenant Access via IDOR Credits This CVE was a collaborative effort between: Raznov – GitHub: https://github.com/basraznov HelloWorld Author– GitHub: https://github.com/Penquinsecq Description A vulnerability in the web application allows unauthorized users to access and manipulate...
CVE-2025-32463
CVE-2025-32463 🚨 Privilege escalation to root usingsudo chroot. No need for gcc installed. 🚀 What is CVE-2025-32463? CVE-2025-32463 is a Linux vulnerability that allows a local attacker to escalate privileges to root by abusing the sudo chroot command. Unlike similar exploits, this technique does...
CVE-2026-25746_SqlInjectionVulnerabilityOpenEMR7.0.4
CVE-2026-25746 - SQL Injection Vulnerability in OpenEMR Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize ...
OverlayFS-LPE-Exploit
OverlayFS-LPE-Exploit OverlayFS Local Privilege Escalation CVE-2021-3493 Project Overview This repository contains documentation and exploit code for a Local Privilege Escalation LPE vulnerability found in the Ubuntu Linux kernel. This was tested in a TryHackMe lab environment. Lab Highlights...
BlockGuard
🛡️ BlockGuard — Process-Based File Access Security Agent BlockGuard is a Windows Data Loss Prevention DLP agent that intercepts and controls file access at the process level. It ensures that only authorized processes — identified by executable path, cryptographic hash, Authenticode signature, and...
EUVD-2026-102239
Missing Authorization vulnerability in WP E-Signature Ninja Forms Signature Contract Add-On ninja-signature-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ninja Forms Signature Contract Add-On: from n/a through 3.2.5...
CVE-2026-110378
The WordPress Ninja Forms Signature Contract Add-On plugin (versions ≤ 3.2.5 ) is vulnerable to a Broken Access Control issue. This vulnerability is caused by Missing Authorization , specifically allowing for the exploitation of Incorrectly Configured Access Control Security Levels . The impact o...